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30 December 1975 


MEMORANDUM FOR: 

SUBJECT: 

REFERENCE; 


Deputy Director for Administration 

GAO Audit Options 

DDA 75-5866, Subject: GAO Audit 
of CIA, Dated 9 December 1975 


1. Thank you for the report of the Agency Task Force with 
respect to a possible GAO audit of Agency activities. It Is 
obviously a comprehensive and thoughtful effort. 

2. let me clarify one point. I do not believe we should 
take the Initiative In bringing about full GAO audit of Agency 
activities. I do believe, however, that It Is sufficiently 
likely to be among the results of the current round of Investi- 
gates that we should be preparing our position with respect 

3. In this light, I believe there are some aspects of 

the Task Force report which require some reconsideration. There 
Is an unspoken assumption that exposure of some of our operational 
secrets "to GAO" would result In their revelation. I believe 
the GAO review of NSA and their review of the FBI (where 
apparently they even had access to Informant Identities) puts 
this In some doubt, provided appropriate arrangements are made 
for compartments tl on. Thus, I believe the stress of the 
arrangements with GAO should be on the manner In which GAO 
handles the material It will learn. In this respect the 
points made on page 8, para E, "Security" seem highly appropriate, 
but I believe they do not go far enough. I believe that 
arrangements should be made for a compartmented unit of GAO to 
conduct any CIA audit and that this compartmented uni t 1 s 
Information should not be made available to other than specifically 
designated senior members of GAO. I believe there should also 
be an arrangement by which consultation can take place as to the 
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way general conclusions of such audits can be separated from the 
sensitive details on which they are based, so that the conclusions 
could be reported to the appropriate oversight committees while 
continuing to compartment the sensitive details. 

4. Even with a compartmented unit, however, I urge that 
we take as strong a stand as possible with respect to agent 
identities and have them audited in cryptonym rather than In true 
name. Essentially this approach would result In a three-tiered 
hierarchy rather than the two tiers contemplated In the Task 
Force report, 1,e., 

(a) agent Identities, and other highly critical 
operations personally certified by the OCI, not divulged; 

(b) other sensitive material which would actually 

be certified by the Director under Section 8b for financial 
expenditure but which would be subject to compartmented 
audit by a GAO team. In the same way that our own Audit 
Staff conducts such audits; 

(c) general conclusions deriving from the above 
on matters on which there Is no special sensitivity. 

These would be suitable for more general dissemination 
to oversight committees and others duly authorized to 
receive them, although they would continue to be 
classified. 

5. Many of the other points In the Task Force report are 
certainly appropriate, e.g., limits on external pursuit of audit 
trails. 1 would not anticipate great difficulty on such points 
provided these arrangements are worked out for specific cases and 
not too broadly generalized. 

6. Thus, I believe the overall recommendations might be reworked 
to reflect the above discussion. Certainly 1(a) for compartmented GAO 
personnel and reports would be appropriate, but I believe the above 
discussion needs to be folded Into It. I believe that 1(b), while 
Ideal, Is probably not feasible if a GAO audit Is Imposed upon us. 

With respect to 1(c), I believe your definition of what would be 
withheld from GAO would not stand up In a negotiation In which a 


2 


Approved For Release 2002/01/30 : CIA-RDP80-00473A0001 0005001 2-7 



Approved For Release 2002/01/30 : CIA-RDP80-00473A0001 0005001 2-7 


GAO audit Is Imposed upon us. Thus, I think it should be reworked 
to establish the three- tier approach suggested above. With respect 
to para 2 recoroiendatlon, I believe the Review Panel should also 
include the Chief of the Audit Staff and the Comptroller. 


W. £. Colby 
D1 rector 
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MEMORANDUM FOR: Director of Central Intelligence 
SUBJECT : GAO Audit of CIA 


Sir: 

1. The Agency Task Force which you asked be established 
to address the question of GAO audit of the CIA has now sub- 
mitted their findings to you through the DDA. There is 
universal agreement that if GAO did audit CIA, there be 
certain restrictions as to the scope of audit, particularly 
those dealing with sources and methods and the protection o± 
agents, contractors, etc. S TAT I NT L 


2. The Action Plan Task Force under 

reviewing the matrix of potential legislation and. tiscai controls 
recommended to you, the DCI take a position against GAO review 
of expenditures. We understand that in the catalog of legisla- 
tion which you forwarded to John Marsh at the White House you 
took no position re for or against GAO audit of CIA unvouchered 
expenditures , 

3. If the Audit Task Force persuades you to take a 
position against GAO review of our unvouchered expenditures, 
then we should hasten to advise John Marsh of that fact. 

4. You recall that GAO withdrew from audit of CIA earlier 
because they could not pursue unvouchered expenditures. If we 
are now to permit that audit to take place, then we would indeed 
be exposing to GAO our sensitive sources, methods, and people 
with whom we do business. I believe we should oppose this 

vigorously. 


/s/ John F. Blako 


John F. Blake 
Deputy Director 
for 

Administration 
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9 DEC 1975 

MEMORANDUM FOR: Director of Central Intelligence 

SUBJECT: GAO Audit 

REFERENCE: Report of Agency Task Force Review of GAO 

Audit Options dated 5 December 1975 

As I believe Jack Blake has reported to you, I reserved a 
little more time to myself to read this report carefully, Most of 
my earlier objections have been removed, but I still have trouble with 
paragraph b on page 7. The problem is primarily that b(l), con- 
cerning identities of agents, etc., and the other subparagraphs, (2), 

(3) and (4), are apples and oranges. It seems to me that b(l) stands 
on its own merits, and any prospective GAO trespass should be 
resolutely opposed. The others make nice bargaining counters; 
we can give in if we have to, but not on names! 

STATINTL 

Comptroller 

/ 

cc: Deputy Director for Administration'-' 

Director of Finance 
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MEMORANDUM FOR: Director of Central Intelligence Agency 
SUBJECT : GAO Audit Options 


1. There Is attached for your review the Report of the Agency 
Task Force of Directorate representatives which was formed at your 
request to develop recoanwidatlons for ground rules which should 
apply to any resumption by SAG of audit of Agency activities. 

2. The report concludes with recommendations of principles 
which the Task Force believes would be useful for your consideration 
In negotiations with the Comptroller General. It Is believed the 
suggested principles are equally applicable whether GAO review of 
the Agency Is mandated by act of Congress or whether you determine 
on your own Initiative to undertake negotiations for such a review. 


John F. Blake 
Deputy Director 
for 

Administration 

Attachment 
As Stated 
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5 December 1975 


REPORT OF AGENCY TASK FORCE REVIEW 
OF GAO AUDIT OPTIONS 


The Agency Task Force of Directorate representatives established 
at the request of the Director to develop recommendations for ground 
rules which should apply to any resumption by GAO of audit of Agency 
activities has reached conclusions which are set forth in the para- 
graphs which follow. 


I. STATEMENT OF THE PROBLEM 

If GAO resumes audit of Central Intelligence Agency activities 
what limitations or restrictions should apply? 

II. OFFICIAL POSITIONS 


A. Comptroller General 

It is assumed the Comptroller General favors resumption of GAO 
audit of Agency activities, provided it could have sufficient access 
to produce meaningful evaluations. 

B. House and Senate Select Committees 

We infer from conversations with staff representatives of the 
Committees and from Congressional questions that the Committees are 
likely to recommend resumption of GAO audit of Agency activities. 

C. Rockefeller Commission 

The Commission Report made no reference to GAO audit, recommending 
instead that the President's Foreign Intelligence Advisory Board assume 
an audit responsibility. 

D. Congress 

At least one bill has been introduced (by Senator Proxmire) 
to formally direct resumption of GAO audit of Agency activities at 
the direction of any of the Oversight Committees. 

E. Director of Central Intelligence 

The Director is on record as being of the opinion that arrangements 
can be made for resumption of GAO audit of Agency activities subject 
to necessary limitations and to agreement on security procedures and 
on distribution and content of reports on audits. 
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III. DISCUSSION OF OPTIONS 

The Task Force in preparing this report gave careful attention 
to (I) the evolution of statutory authority for Confidential Funds, 

(2) the history of GAO audit relationships with the Agency, (3) the 
nature of GAO audits as currently conducted in other agencies and 
(4) the impact on CIA of resumption of GAO audit of Agency activities. 

A. Evolution of Statutory Authority for Confidential Funds 

The capability of carrying out certain operations in the interest 
of the United States Government in an extremely secret fashion is a 
capability that has been continued down through the nation's history. 
President Washington asked for, and got, a secret "contingent fund" 
expenditures from which he could account for "by making a certificate 
of the amount of such expenditure, as he may think it advisable not 
to specify; and every such certificate shall be deemed a sufficient 
voucher for the sums therein expressed to have been expended." (Stat, 
at Large, I, 299). This fund was used by Washington and successive 
Presidents for their foreign intelligence efforts, and it was well 
understood that the existence of the fund was grounded on the need 
for extreme secrecy in certain matters. This rather special capability 
comes down to us in present times of more complex government in the 
form of statutory authority for the President's Director of Central 
Intelligence to exercise control over the expenditures of confidential 
funds. This is the Director's 8(b) authority the actual terms of which 
closely parallel the authority given President Washington. The 
capability for the Government to fund certain sensitive undertakings 
in a manner consistent with the requirements for strictest secrecy 
has never been lost or abandoned throughout our history. 

B. History of GAO audit relationships 

1. Initial Audits . Following enactment of the Central Intelligence 
Agency Act of 1949, the Director, notwithstanding the very broad and 
unusual powers granted to CIA by the Act, requested site audit of 
certain expenditures consistent with arrangements initiated in August 
1946 with the predecessor Central Intelligence Group. Under those 
arrangements the site audit covered expenditures referred to as 
vouchered funds (those which can be accounted for and audited in 
conformance with the laws that apply to other Government agencies 
and with standard Government regulations and procedures) as distinguished 
from confidential funds (accounted for outside the Agency solely by 
certification of the Director of Central Intelligence under the authority 
of section 10(b) (now 8(b)) of the CIA Act of 1949.) The audit process 
was essentially limited to a review of fiscal officers' accounts, 
including examination of certain related vouchers and other documents 
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evidencing the expenditure of appropriated funds to determine whether 
the expenditures were made in accordance with the National Security 
Act of 1947, the CIA Act of 1949 except Section 8(b) and with laws 
and regulations generally applicable to Government expenditures. In 
addition, the site audit staff performed liaison functions between 
CIA and the General Accounting Office as requested by CIA officials. 
Potentially questionable expenditures were submitted to the site audit 
staff for review prior to payment. Reports were not issued to anyone 
outside CIA, and formal exceptions to the expenditures made were not 
taken but instead any questions were discussed informally with CIA 
officials. 

2 • Expansion of Scope . Subsequent to enactment of the Central 
Intelligence Act of 1949 the General Accounting Office broadened the 
type of audit made of the activities of Government agencies generally. 
Under the new "comprehensive" audit approach the General Accounting 
Office construed an agency's financial responsibilities as including 
the expenditures of funds and the utilization of property and personnel 
in the. furtherance of authorized programs or activities in an efficient, 
economical and effective manner. In 1959 the General Accounting Office 
asked permission to discontinue audit of CIA, however, the CIA 
Subcommittee of the House of Representatives Committee on Armed Services 
requested that the General Accounting Office actually broaden the scope 
of its audit of CIA activities. This request was made in a letter to 
the Director of CIA from the Honorable Paul J. Kilday, Chairman, 

Special Subcommittee on CIA, Committee on Armed Services, dated 19 June 
1959. Following a series of extensive discussions, the Director 
proposed to the Comptroller General in a letter dated 16 Oct 1959 
certain principles for the expanded audit. The Comptroller General 
in his letter to the Director dated 21 Oct 1959 agreed to proceed with 
plans for the expanded audit on a trial basis within the principles 
expressed in the Director's letter. 

3. Discontinuance of Audit . In 1961, after completion of a 
trial period, GAO concluded that under existing security restrictions 
on its audit of CIA activities, it did not have sufficient access to 
make comprehensive reviews on a continuing basis which would produce 
evaluations helpful to the Congress. It further determined that 
continuation of the limited financial audit effort which it had 
conducted in prior years at the CIA would not serve a worthwhile 
purpose; it therefore proposed to discontinue all GAO activities 
at the Agency. At about this same time the Agency was engaged in 
a major reorganization and strengthening of its comptroller and 
internal audit functions. (The Agency Audit Staff reports directly 
to the Director of Central Intelligence through the Inspector General 
and observes the same audit principles and standards as the GAO.) 
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Based in part upon these developments and in recognition of the validity 
of the need for restrictions on the scope of audit the Honorable Carl 
Vinson, Chairman, Committee on Armed Services, House of Representatives 
agreed in July 1962 to the Comptroller General's recommendation to 
terminate all audit efforts; since that time GAO has not conducted 
any reviews at the CIA nor any reviews which focus specifically on 
CIA activities except for (a) a Congressional ly initiated request for 
GAO review of the Radio Free Europe program from inception through 
30 June 1971 which resulted in issuance by GAO of an unclassified 
report, B-173239, and a classified supplement, both dated 25 May 1972 
and (b) three recent reviews discussed in the next paragraph. 

4. Ad Hoc Reviews . Recently, the Honorable Lucien Nedzi, 

Chairman, Special Subcommittee on Intelligence, requested GAO to 
review the processes followed for the sale of the assets of two of 
our air proprietaries whose relationship with the Agency had become 
generally known to the public. Three reviews have been completed 
in this regard and classified reports commenting favorably on the 
method and propriety of the sales issued directly to Mr. Nedzi. 

C. Current Nature of GAO audits in other agencies. 

1. The objectives of GAO audits are to determine: 

a. Whether the agency is carrying out only those activities 
or programs authorized by the Congress and is conducting them in 
the manner contemplated to accomplish the objectives intended. 

Where appropriate, a review is also made for the purpose of 
considering whether the authorized activities or programs effec- 
tively continue to serve their originally intended purpose. 

b. Whether the programs and activities are conducted and 
expenditures are made in an effective, efficient, and economical 
manner and in compliance with the requirements of applicable 
laws and regulations, including decisions of the Comptroller 
General . 

c. Whether the resources of the agency, including funds, 
property, and personnel, are adequately controlled and utilized 
in an effective, efficient, and economical manner. 

d. Whether all revenues and receipts arising from the 
operations under examination are collected and properly accounted 
for. 


e. Whether the agency's accounting system complies with the 
principles, standards, and related requirements prescribed by 
the Comptroller General. 
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f. Whether reports by the agency to the Congress and the 
central control agencies disclose properly the information required 
for the purposes of the reports. 

2. The usual emphasis of current GAO audits is on the "big 
picture" and typically includes reviews of (a) activities of the 
agency against the backdrop of governing laws and Congressional intent, 

(b) management controls and (c) budgetary and financial control practices. 
Continuing attention is given to possible duplications of effort within 
an agency or with activities of other agencies. 

D. Impact on CIA of Resumption of GAO audit of agency activities. 

1. It seems obvious that unlimited access by GAO to agency activities 
to achieve the general and specific objectives discussed above and 

full public reporting of the results of audits would be unacceptable. 

2. The comments and conclusions which follow take into consideration 
the positions of each of the Directorates based upon careful soundings 

by the respective directorate representatives of the principal components 
in their Directorates for an objective analysis of the potential impact 
of a comprehensive GAO audit on the diverse functions of each such 
component. 


a. Each of the Directorates has expressed a variety of very 
legitimate concerns about a comprehensive and unrestricted GAO 
audit. These concerns all basically relate in a broad sense to 
the need to protect the sensitive intelligence sources and methods 
which the Director by statute must protect from unauthorized 
disclosure. It is also the consensus that it is a basic require- 
mentfor the successful conduct of sensitive aspects of the Agency 
mission that the Director's 8(b) authorities be preserved. In 
the future as in the past, it will be necessary to undertake 
actions of extreme sensitivity for which a withholding of information 
from all except those directly involved is essential to the success 
of the action. In the context of these concerns there is general 
agreement in a pragmatic sense that in determining the potential 
scope of audit should GAO nevertheless resume an audit function, 
a clear distinction must be made between: 

(1) activities which would provide information to the 
auditors which if divulged would represent an unauthorized 
disclosure of intelligence sources and methods 

versus 

(2) activities which would directly compromise the 
Agency mission and thus cannot be allowed, e.g., various 
external verifications or evaluations of transactions or 
activities not openly Agency sponsored. A listing of such 
transactions or activities follows: 
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by denying access to financial vouchers covered by DCI certification 
under section 8(b). Much of such information is not related 
directly to specific disbursements, hence it is important to 
establish the broader principle of denying access not on the basis 
of DCI certification of funds but on the basis of the substance 
of the information. 

e. There is general recognition in relation to all of the 
foregoing the Agency has never been immune to the risk of un- 
authorized disclosure by its own employees either by carelessness 
or by design, particularly on the part of employees who have 
terminated their Agency association. The risk of such leaks is 
of course minimized by a large body of security practices with 
heavy emphasis on compartmentation and the need-to-know principle. 
The missing ingredient in security practices is of course the 
lack of a law (which the Director has requested) which would 
impose penalties against unauthorized disclosures. 

E. Security 

1. Any resumption of GAO audit whether based on a legislative 
directive or on the request of the Director, will necessarily require 
negotiations between the Director and the Comptroller General to 
establish the general parameters for the scope of audit and related 
arrangements. In this context it is believed as a precondition to 
resumption of any GAO audit relationship: 

a. That all GAO personnel to be involved directly or 
indirectly in such audits should be subject to identical security 
arrangements as pertain to Agency personnel, i.e., full security 
clearance(s) , execution of secrecy agreements, and observance 

of the compartmentation principle to the maximum practical extent. 

b. That audit reports should be subject to review and 
sanitization by the Agency to protect sensitive intelligence 
sources and methods. 

c. That classification and distribution of audit reports 
should be subject to Agency review. 

d. That all written materials used or developed in conjunction 
with the audits should be secured in accordance with Agency 
security standards. 

2. It is believed there should be a direct correlation between 
the foregoing security and control arrangements assuring protection of 
sources and methods and the agreed upon scope of audit; i.e., the 
extensiveness of scope agreed upon should be contingent upon the 
security and control arrangements. 


8 


Approved For Release 2002/01/30 : CIA-RDp80-00473A0001 0005001 2-7 



25X1A 


Approved For Release 2002/01/30Sp|®dP80-00473A000100050012-7 


F. Audit Options 

After full exploration of the range of viable options for 
consideration other than continuation of the present status quo, 
only two are considered viable in the circumstances. Resumption of 
a limited audit of pre-1962 scope is not included because there is 
nothing to suggest such an approach would be more palatable to GAO 
today than when it was discontinued. The two options are as follows: 

1. Systems Audit (Least Impact) 

a. Review of Agency Audit Staff procedures, the Agency 
Accounting System and supporting procedures for Agency financial 
administration. Such a periodic systems audit or review could 
provide Congressional Oversight Committees with an independent 
evaluation and confirmation that generally accepted accounting 
principles and standards are being observed by the Agency in its 
stewardship of public funds and that audits are conducted in 
accordance with Federal Audit Standards. 



b. It is the consensus of the Task Force this type of review 
could be accommodated without undue risk to unauthorized disclosure 
of intelligence sources and methods. As a matte* 
the Agenc y on its own initiative in 1973 engaged! 

BHHH 0 review Agency audit practices. The principal conclusions 
cj^tna^eview were that (1) the overall internal audit effort is 
adequate to safeguard Agency assets and ensure administrative 
compliance with laws and regulations and (2) Agency management 
should encourage broader audit coverage of the economy, efficiency 
and effectiveness with which its programs are conducted. A 
similar review by GAO would have the advantage of placing the 
Agency in compliance with the GAO requirement upon Federal agencies 
generally for GAO review and approval of Agency accounting systems. 


2. Full Scope Audit in accordance with GAO Standards with 
Limitations. 


a. Full access to internal fiscal and program documentation 
for all CIA activities excluding access to: 

(1) Identities of agents, sources and persons and 

organizations involved in operations which, if disclosed, 
could subject them or their families to personal physical 
danger, or to extreme harassments, or to economic or other 
reprisals. f 

(2) Designated highly sensitive material provided 
confidentially by cooperating foreign intelligence services 


9 


Approved For Release 2002/01/30 : C1A-RDPq0-00473A0001 0005001 2-7 

' J 


25X1A 




* Approved For Release 2002/01/30 : CIA-RE)P80-00473A0001 0005001 2-7 


definition of information to be made available. As a forum for 
establishing and administering guidelines for implementing any 
agreement with the Comptroller General, it is suggested a Senior 
Review Panel comprised of the Associate Deputy Directors and the 
General Counsel be established. Issues not satisfactorily resolved 
by the Panel would necessarily be referred to the Director for 
resolution directly with the Comptroller General. It is suggested 
this Senior Review Panel should also provide a forum for resolving 
any differences of view between Agency components and GAO concerning 
areas in which external verifications are suitable. 

IV. RECOMMENDATIONS 

If GAO review of the Agency is mandated by an Act of Congress, 
or if the Director determines to undertake negotiations with GAO for 
an audit on his own initiative, the GAO Audit Task Force recommends: 

1. That the following principles guide the Director’s negotiations: 

a. That GAO personnel and reports must be subject to security 
limitations acceptable to the Agency. These are enumerated on page 
8, paragraph III.E. of this report. 

b. That the Director seek to have a GAO audit limited to a 
Systems Audit, as defined and discussed on page 9, paragraph 

I II . F. 1 . of this report. 

c. That if a "full scope audit" by GAO is instituted, the 
Director exercise his authority under Section 8(b) of the CIA Act 
and his responsibility to protect intelligence sources and methods 
so that: 


(1) GAO would not be permitted external review or verification 
of certain activities (enumerated beginning on page 5, paragraph 

I II . D. 2 . a . ( 2) ) which would compromise Agency activities, and 

(2) GAO would not be permitted access to internal 

documentation relating to certain extremely sensitive activities 
(categories of information listed beginning on page 9, paragraph 
III. F. 2. a). ' 

2. That a senior review panel comprised of the Associate Deputy 
Directors and the General Counsel be named to implement and administer 
any arrangement for resumption of GAO audit of Agency activities. 
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REPORT OF AGENCY TASK FORCE REVIEW OF GAO AUDIT OPTION'S 


Respectfully Submitted, 

GAO Review Task Force . 25X1A 



* 


I believe Chief, Audit Staff, with his intimate knowledge of the 
manner in which GAO operates under FederrJ 1 and American institute 
of Certified Public Accountants Audit Standards, should serve on 
the Senior Review Panel in at least an advisory capacity. 
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i iORANOUM FOR: Director of Central Intelligence Agency 
SUBJECT : fLAQ Audit Options 


1. There Is attached for your review the Report of the Agency 
Task Force of Directorate representatives 'which was formed at your 
request to develop recommendations for ground rules which should 
apply to any resumption by GAO of audit of Agency activities. 

2. The report concludes with recommendations of principles - 
which the Task Force believes v.’ould be useful for your consideration 
in negotiations with the Comptroller General. It is believed the 
suggested principles arc equally applicable whether GAO review of 
the" Agency Is mandated by act of Congress or whether you determine 
on your own Initiative to undertake negotiations for such a review. 


John F. Blake 
Deputy Director 

... for 

Administration 

Attachment 
As Stated 


This document may be 
downgraded to Unclassified 
when removed from attachment 
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